[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7130 [Firefox Patch Issues]: Canvas image data is blocked from chrome (such as NoScript's ClearClick) (was: Canvas image data is blocked from chrome callers)

#7130: Canvas image data is blocked from chrome (such as NoScript's ClearClick)
----------------------------------+-----------------------------------------
 Reporter:  mikeperry             |          Owner:  mikeperry
     Type:  defect                |         Status:  new      
 Priority:  normal                |      Milestone:           
Component:  Firefox Patch Issues  |        Version:           
 Keywords:                        |         Parent:           
   Points:                        |   Actualpoints:           
----------------------------------+-----------------------------------------

Comment(by mikeperry):

 Technically, this actually breaks NoScript's ClearClick protections, but I
 have not noticed NoScript ever successfully blockeding a real clickjack
 with ClearClick.. And I have been clickjacked..

 If I'm wrong, and ClearClick actually does block real clickjack vectors in
 a normal Firefox, perhaps this ticket should be bumped to major or higher.
 It could be that other TBB changes also break ClearClick..

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7130#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs